Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
File:                     rLhNci0lVbSDPOQGgw_b_pgrfGY.mft (raw, json)
Hash identifier:          jjRfw5sRlf8WJBvWjVg8VNglpZdiobIZDpnXT+aWoFY=
Subject key identifier:   5A:A0:BC:D6:19:2A:04:5A:DE:A7:CF:36:80:E0:D6:A8:99:4D:8F:C0
Authority key identifier: AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66
Certificate issuer:       /CN=A9180669/serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
Manifest number:          EC
Signing time:             Mon 03 Aug 2026 07:48:09 +0000
Manifest this update:     Mon 03 Aug 2026 07:48:08 +0000
Manifest next update:     Mon 10 Aug 2026 07:48:08 +0000
Files and hashes:         1: rLhNci0lVbSDPOQGgw_b_pgrfGY.crl (hash: pXZbEagqV+3ygLkwMuLzKF1czgye9oN1MMtKdEt5+NM=)
                          2: 7D1BFC5E24B411F08834DE10C4F9AE02.roa (hash: 1KI+aZbE9Mv6odog4v9f/D+YWvSf6u1v6UudyMifRKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl
                          rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Aug 2026 07:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180669, serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
        Validity
            Not Before: Aug  3 07:48:08 2026 GMT
            Not After : Aug 10 07:48:08 2026 GMT
        Subject: CN=6a7047b9-4acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:28:14:6e:e4:b9:19:a0:16:6b:f0:f2:fc:fb:
                    72:97:08:d1:27:ee:70:b1:5a:68:28:f5:40:e7:6d:
                    37:ad:9b:fe:19:5d:be:27:32:35:27:da:7a:07:87:
                    91:ba:a6:bb:fc:1d:11:f5:d5:b7:73:6b:80:e6:dc:
                    cb:71:a5:d5:3c:e4:63:6d:f6:49:76:08:b6:d9:a3:
                    9a:6f:4f:bc:6e:a2:5a:be:54:9f:14:e6:35:36:95:
                    28:12:ee:dc:f0:e8:9d:fd:9b:5e:22:85:ea:3f:b4:
                    d8:fe:e2:3f:6e:a0:08:b0:4d:a6:c1:f3:c6:69:a9:
                    ed:fe:8b:de:df:4c:70:ae:cc:7e:d6:cd:b8:c7:de:
                    b3:56:bc:19:a7:01:24:5b:b6:d7:6d:7b:c0:23:d3:
                    d2:98:92:05:d9:1a:7c:f2:98:70:de:b4:37:70:ab:
                    13:34:6b:f5:d6:ec:9d:12:02:f1:3c:6c:8d:4e:7e:
                    2c:b8:40:00:f4:0d:fe:07:cc:23:41:37:60:ed:ab:
                    62:a7:f3:ac:62:f5:aa:0e:27:66:f3:f7:62:c7:89:
                    08:56:39:c8:7a:85:46:37:4b:64:ee:c6:ff:7a:4d:
                    20:84:0f:2e:4e:25:05:6e:ce:6e:9c:e8:d8:63:c3:
                    a7:29:75:83:12:74:bd:69:49:0a:b7:d5:a1:dd:15:
                    29:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A0:BC:D6:19:2A:04:5A:DE:A7:CF:36:80:E0:D6:A8:99:4D:8F:C0
            X509v3 Authority Key Identifier:
                keyid:AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:81:c0:ca:92:37:47:13:fe:94:9c:08:39:d0:bc:0e:3a:18:
         c0:16:f8:cf:8a:82:39:e9:9d:02:ee:35:92:30:d5:94:18:10:
         42:cd:c4:39:ed:40:f9:fa:b5:d9:28:9d:16:ac:83:f4:5d:f0:
         95:e0:7d:d8:1d:2f:bc:9c:6f:1f:2f:ac:ec:df:59:1b:97:a0:
         b4:02:07:a0:91:c3:6b:46:65:d6:67:da:09:98:28:31:9d:5c:
         94:d6:4f:80:17:89:21:de:0f:63:b2:14:f0:09:cc:60:3a:46:
         bc:d0:74:19:d9:ec:cf:35:4a:96:5b:f2:a4:54:cb:5b:e5:ac:
         26:31:f5:47:f8:46:b3:24:ca:65:58:c4:85:f8:ba:a1:5e:96:
         09:51:49:ce:90:9a:02:e5:8a:76:ff:22:e1:26:51:d0:9c:3f:
         1e:ad:b2:75:ff:c1:19:c6:91:16:82:ac:78:83:d8:6d:20:91:
         b7:32:6a:ce:d2:65:79:45:41:5a:33:39:b7:af:dd:27:ca:8d:
         38:f8:02:f2:79:b1:52:e3:58:17:78:66:a3:32:a6:98:11:f1:
         6f:7b:2d:3b:95:31:6e:67:2f:4e:06:5c:3b:20:ed:cd:93:91:
         41:ba:f0:d6:cd:93:78:1b:b4:b9:84:b0:62:7e:10:4e:ed:5a:
         74:0a:10:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 21:02:47 2026 by rpki-client